OpenSSL 4.1.0 released: DTLS 1.3, GREASE, and what breaks when you upgrade
OpenSSL 4.1.0 adds DTLS 1.3 and GREASE and drops the CN fallback in host-name checks. What breaks, how to test it, and which version to run.
System architecture
Data models, migrations and the decisions that are expensive to reverse.
System architecture articles
eMudhra's weak CA keys: why emSign ECC Root CA - G3 is distrusted, and how to replace affected certificates
eMudhra's CA keys were numbers below 256. Why that breaks P-384, what the emSign ECC G3 distrust breaks, and how to replace affected certificates.